Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer
File: Fq85Z82e72n-cs9m28bg-wDKONQ.cer (raw, json)
Hash identifier: 8WeCMIWJqCve+azF5cv8nT+oKKra9BTJJgYDHbyMJVs=
Subject key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02283A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Jan 2025 20:57:46 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 152313
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141370 (0x2283a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 8 20:57:46 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91D34D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:a7:82:43:d0:b0:f6:48:32:3d:91:02:7e:
a3:fd:2c:4c:d3:8c:5f:35:bf:4f:3b:8e:cb:df:55:
00:0e:4b:19:f3:7e:04:eb:fe:96:bb:e5:b3:4c:b5:
57:d0:33:4b:97:35:69:77:a5:d3:4c:a6:0c:9b:e4:
d7:e2:20:6c:d9:81:ab:fe:d1:5f:2a:94:49:36:1f:
7e:02:0e:ec:91:2b:7e:6d:65:79:8d:15:6c:3c:5b:
43:aa:3b:07:cf:d5:97:b9:f5:d0:73:0b:b0:5d:37:
0e:9c:e4:98:03:46:3e:40:b5:81:0c:ca:86:82:02:
cd:e9:53:f5:2e:d1:c4:9e:41:2d:37:19:3a:b9:59:
8a:b4:1c:14:64:a0:b2:ab:a4:eb:b9:e6:2e:41:63:
23:84:df:76:f2:55:8f:05:42:23:a1:a7:31:6a:92:
90:0d:ff:21:5f:6d:e9:93:54:68:9d:7c:fc:6d:de:
8c:93:3e:8e:f5:9f:2a:d8:9c:2b:9a:de:d5:9d:4b:
93:fd:db:af:ba:33:b9:10:48:9f:30:81:5e:70:bf:
01:0c:72:d3:17:31:7e:26:29:81:2b:42:57:67:56:
41:71:52:42:2d:88:bb:f6:1b:79:61:91:84:90:a3:
e5:1a:b6:3d:bd:06:e7:a9:78:74:1b:90:f7:50:d0:
18:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152313
Signature Algorithm: sha256WithRSAEncryption
1d:e3:fd:4e:79:41:00:4f:d0:5c:d4:3d:2c:dd:1c:0e:45:be:
e4:72:27:b4:20:76:3c:1b:ba:6b:dc:c4:90:e4:a0:0d:d4:7d:
27:07:67:e8:e6:b6:a7:a8:32:7c:1b:5e:89:53:d8:f9:0e:2a:
c1:70:63:6f:dc:1b:6e:09:e9:25:f2:dd:37:42:6d:a1:82:9e:
ca:bb:ee:99:36:14:52:4d:a6:3c:32:9b:86:85:f5:67:bd:fa:
0f:f3:6c:e6:48:6d:69:79:d6:7a:41:62:60:f5:b8:0d:a0:64:
99:32:4a:dc:74:03:43:67:36:aa:db:e1:ba:6a:ef:ba:19:12:
95:fc:1d:06:1a:0e:23:d5:d7:fa:34:54:2e:00:a4:56:cf:85:
83:21:c5:8b:4c:44:be:c8:1b:7a:5d:9c:59:8e:82:cd:28:52:
69:f8:cf:99:f0:6c:4a:34:20:68:22:e7:8d:9c:d3:88:0f:81:
95:8f:13:f9:3e:6e:92:61:a6:79:7d:23:ef:f2:04:9e:e0:70:
64:bf:60:8c:67:54:df:01:cd:ab:6d:cb:9a:50:75:36:64:17:
ab:8a:cc:e2:c1:b4:85:17:72:86:bd:3a:28:2f:22:a9:d9:ac:
0b:1c:2c:c7:3d:63:3f:40:57:23:03:07:b5:36:ff:ad:4d:31:
32:a4:90:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:21 2025 by rpki-client